name: Build ISO

on:
  workflow_dispatch:

jobs:
  build:
    runs-on: artix-runner

    steps:
      - name: Install dependencies first
        run: |
          pacman -Syu --noconfirm --needed --overwrite='*' \
            artools \
            git \
            squashfs-tools \
            sudo \
            python \
            python-pip \
            curl \
            ca-certificates

      - uses: actions/checkout@v4

      - name: Bootstrap Euri package signing key
        run: |
          KEY_FINGERPRINT=AA644A095D2AF5F950FADB57C51BFE8D3A985236
          curl -fsSL -o /tmp/euri.gpg https://antergos-nas.taild4360b.ts.net/Antergos-NeXT/antergos-packages/raw/branch/master/packages/antergos-next-keyring/antergos-next.gpg
          pacman-key --init
          pacman-key --add /tmp/euri.gpg
          gpg --homedir /etc/pacman.d/gnupg --batch --with-colons --fingerprint "$KEY_FINGERPRINT" | grep -q "fpr:::::::::$KEY_FINGERPRINT:"
          pacman-key --lsign-key "$KEY_FINGERPRINT"
          rm -f /tmp/euri.gpg


      - name: Set up WORKSPACE_DIR
        run: |
          echo "WORKSPACE_DIR=${{ gitea.workspace }}" >> $GITHUB_ENV

      - name: Override pacman.conf with euri-pkgs repo
        run: |
          mkdir -p /root/.config/artools/pacman.conf.d
          cp "pacman.conf.d/iso-x86_64.conf" \
             /root/.config/artools/pacman.conf.d/iso-x86_64.conf
          cp "pacman.conf.d/iso-x86_64.conf" \
             /usr/share/artools/pacman.conf.d/iso-x86_64.conf

      - name: Build ISO
        run: |
          sudo -E ./buildiso -p euri

      - name: Generate checksums
        run: |
          ISO=$(ls iso/euri/euri-*.iso 2>/dev/null | head -1)
          [[ -z "$ISO" || ! -f "$ISO" ]] && { echo "No ISO found"; exit 1; }
          sha256sum "$ISO" > "$ISO.sha256"
          cat "$ISO.sha256"

      - name: Upload ISO artifact
        uses: actions/upload-artifact@v4
        with:
          name: Euri-Linux-ISO
          path: iso/